{"id":2792348,"url":"https://alion.io/job/report-an-inc-vulnerability-detection-engineer","title":"Vulnerability Detection Engineer","company":{"id":1884054,"name":"Report an Inc","domain":"beazley.security","url":"https://alion.io/company/beazley-security","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Git","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"CVSS","optional":true},{"name":"CWE","optional":true},{"name":"Docker","optional":true},{"name":"EPSS","optional":true},{"name":"KEV","optional":true},{"name":"Nmap","optional":true},{"name":"Nuclei","optional":true}],"status":"live","first_seen_at":"2026-10-17T18:24:38Z","employer_posted_date":null,"last_verified_at":"2026-10-17T18:24:38Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"About Beazley Security:\n\nBeazley Security is a global cybersecurity firm committed to helping clients enable advanced cyber defenses that reduce risk with quantifiable results. We’re comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of a specialty insurance giant, Beazley Insurance, we’ve been at the forefront of cyber insurance management and breach response activities for business clients in the US, UK, and Europe since 2017. As Beazley Security, the company will have an expanded scope, leveraging nearly two decades of cyber incident experience, a strong services division, and a business strategy focused on growth, to realize our goals and deliver benefits to clients.\n\nAs a company, we are committed to upholding our core values of Belonging, Integrity, Service, Accountability, and Curiosity. We believe these values are essential to creating a strong and inclusive workplace culture, as well as to deliver world-class cybersecurity solutions to our clients worldwide. As Beazley Security, these values will continue to thrive, with an extra emphasis on expansion of our capabilities and capacity in helping solve unique client challenges.\n\nAbout Beazley Security Labs: \n\nBeazley Security Labs (BSL) is responsible for transforming real-world threat activity into actionable intelligence that directly improves client security outcomes and strengthens Beazley Security’s products and services. The team conducts in-depth cybersecurity research, derives insight from incident response engagements and MDR findings, and proactively identifies emerging threats and vulnerabilities to deliver timely security advisories and detection logic for our Exposure Management platform. \n\nBeazley Security Labs also provides operational threat intelligence that supports Managed Detection and Response and Incident Response teams through threat hunts and threat actor profiling, while also producing original research, quarterly threat reports, and industry content that builds Beazley Security’s credibility and brand. With the ultimate goal of making adversaries less effective, Labs serves as a critical bridge between frontline incidents, product innovation, and thought leadership. \n\nAbout the Role:\n\nThe window between vulnerability disclosure and mass exploitation keeps getting shorter. As a Vulnerability Detection Engineer on Beazley Security Labs, your job is to close that window for our clients. When a critical vulnerability drops, you figure out how to reliably identify it from the internet, build a detection for it, prove it works, and ship it to our Exposure Management platform so clients know whether they are exposed before an attacker does. This work rewards a certain curiosity about how software breaks, and the patience to keep asking how to identify vulnerable systems from the internet. \n\n You will work as part of the Beazley Security Labs research team to identify and analyze emerging threats and critical vulnerabilities, and to own the delivery of detection logic that surfaces that exposure in client environments. The role combines vulnerability analysis, exploit research, and threat intelligence with the engineering work required to turn research findings into real world detections. You will use agentic workflows as part of that process, building skills and automation that accelerate research, validation, and detection development. The role also contributes to Beazley Security Labs research supporting security operations, incident response, and client advisories. \n\nKey Responsibilities:\n\nConduct vulnerability research on internet exposed services and software, working with the BSL research team to determine what a vulnerable instance looks like in collected scan data \n\nMonitor vendor advisories, vulnerability disclosures, and help determine which vulnerabilities warrant detection coverage based on exploitability and exposure across our client base \n\nAnalyze proof of concept exploits in lab environments to identify the version strings, response behaviors, service fingerprints, and configuration artifacts that distinguish vulnerable systems and services \n\nAuthor, test, and maintain vulnerability detection logic against Exposure Management scan data, and own detection lifecycles \n\nDevelop and maintain scan configurations that collect the data detections depend on, including service fingerprinting, targeted protocol probes, and response parsing \n\nValidate new and existing software detections across client asset data, and be accountable for the false positive and false negative rates of the coverage you own \n\nBuild and improve internal tooling and automation for vulnerability monitoring, detection authoring, and regression testing \n\nCollaborate on technical write ups, advisories, and remediation guidance that accompany your detections, and contribute to Beazley Security Labs intelligence reporting and published research \n\nPartner with other internal departments to convert frontline intrusion findings into proactive detection coverage within Exposure Management \n\nApply where Agentic AI can be leveraged to improve our existing processes analyzing new vulnerabilities reported by the industry. \n\nResearch where Agentic AI can be leveraged to improve our existing processes of discovering affected software in our client base, validating vulnerable status, and producing advisory content. \n\nRequired Qualifications:  \n\nProficiency writing analytical SQL, including joins, aggregations, and regular expression matching, with the ability to reason about query correctness and performance against large datasets \n\nWorking proficiency in Python for data manipulation, parsing, tooling, and automation \n\nProficiency designing and applying agentic AI workflows and AI harnesses to detection research and engineering, including building reusable skills, automating research and validation, and operationalizing detection deployments at scale \n\nExperience with Git, code review, and testing practices in a detection engineering environment \n\nStrong grasp of networking fundamentals, HTTP, TLS, and web application architecture, sufficient to interpret raw service responses and understand how to fingerprint software \n\nPractical understanding of common vulnerabilities and how they are exploited, including authentication bypass, remote code execution, injection flaws, deserialization attacks, and path traversal \n\nAbility to read a vendor advisory or public proof of concept code and independently determine what evidence would confirm a vulnerable instance \n\nDemonstrated ability to work carefully with ambiguous or incomplete data \n\nPreferred Qualifications \n\nExperience writing detection, alerting, or analytic logic against large-scale telemetry or scan data in a data warehouse environment \n\nExperience with data quality work identifying gaps, inconsistencies, or drift in upstream collection \n\nFamiliarity with detection and scanning frameworks such as Nuclei or Nmap NSE, and an understanding of how their scanning logic works \n\nExperience collaborating in a code repository and using AI assisted coding tools \n\nExposure to vulnerability prioritization frameworks including CISA KEV, EPSS, CVSS, and CWE \n\nExperience building isolated lab environments with Docker or virtual machines to reproduce vulnerable software \n\nExperience with patch diffing, binary analysis, or reverse engineering \n\nPublished CVEs, bug bounty findings, open-source security tooling contributions \n\nBeazley Security Offers:\n\nCompetitive salary and bonus.\n\nFlexible working arrangements. \n\nGenerous leave policies including 3 months paid parental.\n\n100% of employee-only insurance premiums covered (healthcare, dental and vision).\n\nUp to 5% matched 401k contribution.\n\nOpportunities for career advancement and ongoing training.\n\nParticipation in industry conferences and events. \n\nOriginally posted on Himalayas","description_format":"text","description_chars":8049,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Vulnerability Management","Information Security","Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-17T20:28:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":36,"reasons":["seen:2","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/report-an-inc-vulnerability-detection-engineer","json_url":"https://alion.io/job/report-an-inc-vulnerability-detection-engineer.json","meta":{"generated_at":"2026-10-20T17:30:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20079,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1884054},"rest":"https://alion.io/mcp/rest/get_company?id=1884054"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freport-an-inc-vulnerability-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freport-an-inc-vulnerability-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freport-an-inc-vulnerability-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/report-an-inc-vulnerability-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freport-an-inc-vulnerability-detection-engineer"}]}